JPMorgan failed to surveil billions of orders — about $448M in fines

In March and May 2024, three US regulators resolved actions over JPMorgan's trade surveillance. The OCC assessed a $250 million penalty against JPMorgan Chase Bank, the Federal Reserve fined JPMorgan Chase & Co. about $98.2 million, and the CFTC ordered J.P. Morgan Securities to pay $200 million, with $100 million of that offset by the OCC and Fed payments.

The CFTC order found that from 2014 through 2021, J.P. Morgan failed to ingest — and therefore failed to surveil — billions of order messages on a US designated contract market, largely sponsored-access trading for three algorithmic trading firms. The gap surfaced in 2021 while onboarding a new exchange.

The OCC found the bank operated with gaps in venue coverage and without adequate data controls across at least 30 global trading venues. J.P. Morgan's quarterly reconciliation process skipped direct-from-exchange feeds because the firm assumed data straight from an exchange was a 'golden source' that needed no testing.

J.P. Morgan admitted the facts in the CFTC order's surveillance sections and agreed to cease and desist, while the OCC required corrective action, an independent assessment, and approval before onboarding new venues.

CFTC $200M (offset by $100M), OCC $250M, Fed $98.2M — roughly $448M in penalties, plus a third-party review and restrictions on onboarding new venues.

The firm assumed exchange-direct data was complete and never tested it.

Billions of orders, mainly sponsored-access flow, were never monitored.

The gaps on multiple venues lasted from 2014 to 2021.

Three regulators traced the same root cause: weak controls over data ingestion.

Surveillance is only as good as the data it ingests: JPMorgan assumed exchange-direct feeds were a 'golden source' and never tested them, so billions of orders went unwatched.

JPMorgan said the surveillance gaps were fully remediated by 2023 and, beyond the CFTC order's factual admissions, neither admitted nor denied wrongdoing. The combined penalty made the case a benchmark for trade-surveillance enforcement.